Quentin Gliech e7c57e013a Expose a logged_out variable to upstream authorization parameter templates ...

When a browser signs out (or discovers its session was ended), the
session cookie now remembers when that happened; the flag is cleared by
the next successful login. The `additional_authorization_parameters`
templates can read it as `logged_out`, so operators can force a fresh
prompt at the upstream provider after sign-out, e.g.:

    additional_authorization_parameters:
      prompt: "{% if logged_out %}login{% endif %}"

This addresses the "sign out signs me back in" loop with upstream SSO
providers that still hold a live session.

Fixes #1569

2026-07-10 15:55:14 +02:00

..

cli

docs: fix stale config references in setup and CLI docs

2026-06-25 19:04:18 +02:00

configuration.md

Expose a logged_out variable to upstream authorization parameter templates

2026-07-10 15:55:14 +02:00

request-log.md

docs: explain the new database statistics in log lines

2026-06-22 14:43:05 +02:00

scopes.md

Mention the stable scopes in the doc, remove the guest scope

2025-06-13 15:56:13 +02:00